Post-paid process and system for multipurpose disconnected terminals

Abstract

This post-paid process and system for disconnected terminals solves the problem of a disconnected terminal being able to perform post-paid operations securely, using an electronic device of the user to communicate with a central server which creates a token with a temporal validity that serves to activate a compound of the disconnected terminal and, optionally, additional hardware. All operations performed in the terminal are locked to make it impossible to alter the data and signed with a cryptographic key before using the client device as transportation for the operations block to be processed in the central server and charged.

The invention claimed is: 
     
       1. A method for performing operations on disconnected multipurpose terminals for post-paid payments comprising
 the electronic device establishing an electronic connection to the central server via at least one data network, and the disconnected terminal establishing an electronic connection to at least one data network via the user's electronic device, wherein the control and command module controls and communicates with the hardware of the said disconnected terminal, in response to a instructions sent by the user through said electronic device and after the validation of the token mandatorily sent; 
 the hash generating for each operation performed in the disconnected terminal comprises the input data related with the elements/values that compose the operation; computing the value of the hash in the immediately preceding operation, allowing to create a structure of chained hashes of operations, where, in the first operation, a predetermined configured genesis hash value is used in the disconnected terminal and is also registered on the central server; 
 the cryptographic keys validating the messages exchanged between the central server and disconnected terminals via the user's electronic device; 
 the queue module managing the queuing of all the blocks received from the users through their electronic devices to be validated by the validation module; 
 the token-validation module validating the tokens generated on the central server by the token generation module, verifying that the expiration date is still valid and whether the signature generated is valid; 
 the index generation module generating an index that informs the disconnected terminal which operation performed on it has already been received, validated and processed in the central server; 
 the index validation module validating the index generated on the central server by the index generation module, which informs the disconnected terminal which operation performed on it was already received, validated and processed by the central server; 
 the block generation module generating a block of operations that have not yet been received, validated and processed by the central server, whose index value is greater than the index value of the operation that the disconnected terminal knows as having been received, validated and processed by the central server; 
 the user's electronic device storing the tokens generated on the central server for use in the disconnected terminals; storing the indices generated on the central server of the operations of the disconnected terminals that have already been received, validated and processed on the central server, so that these indices can be sent to the disconnected terminals; and storing the blocks of operations generated by the disconnected terminals to be sent to the central server for processing and validation; 
 adding the genesis hash to the disconnected terminal, and that is known by the central server, to be used in the creation of the hash of the first operation, since, given that it is the first operation, there is no previous operation whose hash can be used for the concatenation of the hashes; 
 the concatenated hash is characterized b y the way the operations are organized in the disconnected terminal where, for each operation, calculating a hash based on its data and the value of the calculated hash of the previous operation, where, as such, any minimal change in the data of any operation changes the value of the final hash; 
 the central server receiving an electronic connection via a data network with the user's electronic device so that it may authenticate access, request tokens, list indices and send blocks of operations received from the disconnected terminals, where the central server, in one of its realizations, may consist of a token generation module, a clock module, an cryptography module, an index generation module, a block validation module, a queue module and an authentication module; and may have the following databases of: users, disconnected terminals, cryptographic keys, tokens generated, and operations received; and 
 the disconnected terminal receiving a electronic connection via a data network with the user's electronic device to receive the index value, token, order of execution and transmit the block of operations to be sent subsequently to the central server, where the disconnected terminal in one of its realizations may consist of a token validation module, a clock module, a cryptography module, a block generation module, an index validation module, and a control and command module; and where it may have the following databases: operations and cryptographic keys.